{"id":53324,"date":"2021-09-03T10:00:00","date_gmt":"2021-09-03T14:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=53324"},"modified":"2024-08-14T17:03:32","modified_gmt":"2024-08-14T21:03:32","slug":"how-to-encrypt-ubuntu-20-04-desktop-post-installation","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation","title":{"rendered":"How to Encrypt Ubuntu 20.04 Desktop Post Installation"},"content":{"rendered":"\n<p><a class=\"wp-block-cgb-button button\" href=\"#tutorial-step-1\">Jump to Tutorial<\/a><\/p>\n\n\n\n<p>In a separate tutorial, we highlighted the process to deploy <a href=\"https:\/\/jumpcloud.com\/blog\/how-to-enable-full-disk-encryption-on-an-ubuntu-20-04-desktop\">full disk encryption on Ubuntu Desktop 20.04<\/a> with LUKS encryption during installation. In practice, this is the recommended method to protect an Ubuntu device since it encrypts all disk partitions including the swap space and system partitions, thus achieving <em>full disk encryption<\/em>.&nbsp;<\/p>\n\n\n\n<p>If you already have Ubuntu installed without any encryption, then full disk encryption with LUKS may not be an option; however, you could still encrypt the home directory and swap space without requiring a complete reinstallation of the operating system.<\/p>\n\n\n\n<p>By default, the home directory is the directory where most of your personal files reside. This can include documents, spreadsheets, music, videos, images, and any other files you may download. Swap space is the space on the hard drive that is used as virtual memory. When a Linux system is running out of RAM, the inactive pages are pushed to the swap space; while access time is a tad slower than the RAM, in doing so the swap space supplements the device\u2019s RAM when it is almost exhausted.<\/p>\n\n\n\n<p>Ubuntu provides a command-line tool for encrypting both the home directory and the swap space. Why encrypt the swap space as well? As mentioned earlier, the OS periodically swaps out some memory pages to the swap area when the RAM is almost depleted. The information moved to the swap area may contain personal information such as username and passwords which would prove valuable to hackers. It is therefore essential to encrypt the swap space as well.<\/p>\n\n\n\n<p>In this guide, we will explore post-installation encryption on Ubuntu 20.04. We will cover the encryption of both the home directory and swap space which is key in safeguarding personal and professional user data.<\/p>\n\n\n\n<p><strong><em>NOTE: Encryption is a process that could result in data loss on your machine. Please backup your \/home folder prior to performing any of the steps below. Additionally, if you are using JumpCloud to manage the users on this machine, you may experience an unpleasant login loop if you reboot the machine prior to the user logging in with a new password.<\/em><\/strong><\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/EcsDp2mScNg?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-1\"><strong>Step 1: Install Encryption Packages<\/strong><\/h2>\n\n\n\n<p>To begin, we will install the software packages that provide encryption on Linux: <code>ecrypt-utils <\/code>and <code>cryptsetup<\/code>. First, launch your terminal and execute the following command:<\/p>\n\n\n\n<p><code>$ sudo apt install ecryptfs-utils cryptsetup<\/code><\/p>\n\n\n\n<p>When prompted, press \u201c<strong>Y<\/strong>\u201d to proceed with the installation of the packages and other software dependencies.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"239\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-1.png\" alt=\"To begin, we will install the software packages that provide encryption on Linux: ecrypt-utils and cryptsetup.\" class=\"wp-image-53325\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-1.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-1-300x140.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-2\"><strong>Step 2: Create Another User and Assign Sudo Privileges<\/strong><\/h2>\n\n\n\n<p>Encryption of your home directory requires the use of another privileged user. This is because some of the files in your home directory might be rendered inaccessible if you are performing the encryption while logged in with your own account.<\/p>\n\n\n\n<p>For this reason, we will create a new privileged user to encrypt the home directory.<\/p>\n\n\n\n<p>First, we will create a regular user using the following syntax:<\/p>\n\n\n\n<p><code>$ sudo adduser username<\/code><\/p>\n\n\n\n<p><em>For this guide, <\/em><code><em>encryption_user<\/em><\/code><em> is the regular user we are going to create<\/em>.<\/p>\n\n\n\n<p><code>$ sudo adduser encryption_user<\/code><\/p>\n\n\n\n<p>Be sure to fill out all the relevant details and press \u201c<strong>Y<\/strong>\u201d to save the information.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"232\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-2.png\" alt=\"Encryption of your home directory requires the use of another privileged user. This is because some of the files in your home directory might be rendered inaccessible if you are performing the encryption while logged in with your own account.\" class=\"wp-image-53326\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-2.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-2-300x136.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Next, assign root privileges to the newly created user by adding the user to the sudoers group.<\/p>\n\n\n\n<p><code>$ sudo usermod -aG sudo encryption_user<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"83\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-3.png\" alt=\"Next, assign root privileges to the newly created user by adding the user to the sudoers group.\" class=\"wp-image-53327\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-3.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-3-300x49.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Next, log out (DO NOT REBOOT!) and log in using the admin user account.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-3\"><strong>Step 3: Encrypt the Home Directory<\/strong><\/h2>\n\n\n\n<p>Once logged in as the temporary privileged user, you can have a glance at the contents of the home directory that you are about to encrypt. Here, <code>~winnie<\/code> is the home directory of the user account called <code>winnie<\/code> that we will encrypt shortly.<\/p>\n\n\n\n<p><code>$ sudo ls -l ~winnie<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"290\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-4.png\" alt=\"Once logged in as the temporary privileged user, you can have a glance at the contents of the home directory that you are about to encrypt. Here, ~winnie is the home directory of the user account called winnie that we will encrypt shortly.\" class=\"wp-image-53328\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-4.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-4-300x170.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>To encrypt the home directory we will execute the command below. In this tutorial, the home directory is named <code>winnie<\/code>.<\/p>\n\n\n\n<p><code>$ sudo ecryptfs-migrate-home -u winnie<\/code><\/p>\n\n\n\n<p>You will get similar output to what is shown below. When you are prompted for the passphrase, provide the user account\u2019s login password and hit \u201c<strong>ENTER<\/strong>\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"133\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-5.png\" alt=\"When you are prompted for the passphrase, provide the user account\u2019s login password and hit \u201cENTER\u201d.\" class=\"wp-image-53329\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-5.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-5-300x78.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>The encryption of the home directory will start. This takes a while depending on the size and disk usage of the home directory.&nbsp;<\/p>\n\n\n\n<p>Upon successful completion of the file encryption, some instructions will be printed out on the terminal to guide you on the next steps to follow. We will follow these steps below to gracefully wind up the entire process.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"297\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\" alt=\"Upon successful completion of the file encryption, some instructions will be printed out on the terminal to guide you on the next steps to follow. We will follow these steps below to gracefully wind up the entire process.\" class=\"wp-image-53330\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6-300x174.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-4\"><strong>Step 4: Confirm Encryption and Record Passphrase<\/strong><\/h2>\n\n\n\n<p>Next, log out from the privileged user account and log back in (DO NOT REBOOT!) to your regular user account.<\/p>\n\n\n\n<p>Once back in, a pop-up notification will display on the desktop giving you (or the user at their machine, if you are performing this process remotely) the next steps to take to record a passphrase that will be used to recover your home directory. IF a user is not present, the passphrase can be recorded via the terminal (see below).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"409\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-7.png\" alt=\"Once back in, a pop-up notification will display on the desktop giving you (or the user at their machine, if you are performing this process remotely) the next steps to take to record a passphrase that will be used to recover your home directory. IF a user is not present, the passphrase can be recorded via the terminal (see below).\" class=\"wp-image-53331\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-7.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-7-300x240.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tutorial-step-4a\">Step 4A: Confirm Encryption Process Before Recording Passphrase<\/h3>\n\n\n\n<p>But before going any further, you need to confirm that you can read and write files on your home directory. To give this a try, we will create a simple <code>hello.txt<\/code> text file.<\/p>\n\n\n\n<p><code>$ cat &gt; hello.txt<\/code><\/p>\n\n\n\n<p>Type some dummy text and press <code>Ctrl + D<\/code> to save the changes. To verify that you have successfully written the data, again, use the cat command as follows:<\/p>\n\n\n\n<p><code>$ cat hello.txt<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"175\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-8.png\" alt=\"But before going any further, you need to confirm that you can read and write files on your home directory. To give this a try, we will create a simple hello.txt text file.\" class=\"wp-image-53332\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-8.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-8-300x103.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>If you were able to write and read data, then the encryption process completed successfully. This also means that the passphrase was applied to decrypt the home directory when the user logged back in.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"tutorial-step-4b\">Step 4B: Record Passphrase<\/h3>\n\n\n\n<p>Now that you have confirmed read\/write capabilities, you should print out or record the passphrase; to do this, head back to the pop-up window and press the \u201c<strong>Run this action now<\/strong>\u201d button; or, if you are running this tutorial remotely via a terminal, you will need to run the <code>ecryptfs-unwrap-passphrase<\/code> command instead (see below).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"226\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-9.png\" alt=\"Now that you have confirmed read\/write capabilities, you should print out or record the passphrase; to do this, head back to the pop-up window and press the \u201cRun this action now\u201d button; or, if you are running this tutorial remotely via a terminal, you will need to run the ecryptfs-unwrap-passphrase command instead (see below).\" class=\"wp-image-53333\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-9.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-9-300x132.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>When prompted for the passphrase, provide your login password and press \u201c<strong>ENTER<\/strong>\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"164\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-10.png\" alt=\"When prompted for the passphrase, provide your login password and press \u201cENTER\u201d.\" class=\"wp-image-53334\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-10.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-10-300x96.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Thereafter, you can reveal the recovery password using the command:<\/p>\n\n\n\n<p><code>$ sudo ecryptfs-unwrap-passphrase<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"107\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-11.png\" alt=\"Thereafter, you can reveal the recovery password using the command:\" class=\"wp-image-53335\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-11.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-11-300x63.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>Copy the recovery passphrase and keep it somewhere safe.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-5\"><strong>Step 5: Encrypt the Swap Space<\/strong><\/h2>\n\n\n\n<p>Finally, we will encrypt the swap space to prevent any leaks that might compromise sensitive user data. But first, verify if the swap space exists on your system as shown below.<\/p>\n\n\n\n<p><code>$ swapon -s<\/code><\/p>\n\n\n\n<p>The output confirms that indeed we have a swap partition marked as <code>\/dev\/sda3<\/code>. You can further probe the space it occupies using the <code>free<\/code> command. The output shows that it occupies 8G of space.<\/p>\n\n\n\n<p><code>$ free -h<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"182\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-12.png\" alt=\"The output confirms that indeed we have a swap partition marked as \/dev\/sda3. You can further probe the space it occupies using the free command. The output shows that it occupies 8G of space.\" class=\"wp-image-53336\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-12.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-12-300x107.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p>To encrypt the swap space, simply run the command:<\/p>\n\n\n\n<p><code>$ sudo ecryptfs-setup-swap<\/code><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"192\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-13.png\" alt=\"To encrypt the swap space, simply run the command:\" class=\"wp-image-53337\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-13.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-13-300x113.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"tutorial-step-6\"><strong>Step 6: Clean up<\/strong><\/h2>\n\n\n\n<p>At this point, both the home directory and the swap space have been encrypted. You can now remove the privileged user that you used to encrypt the home directory.<\/p>\n\n\n\n<p><code>$ sudo deluser &#8211;remove-home encryption_user<\/code><\/p>\n\n\n\n<p>Additionally, we will also remove the <code>\/home\/winnie.MTL8xtIX<\/code> directory. This is a backup home folder that was created when we ran the initial migration command. You can find it by locating the directory that contains <code>.MTL8<\/code> in the name.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"85\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-14.png\" alt=\"Additionally, we will also remove the \/home\/winnie.MTL8xtIX directory. This is a backup home folder that was created when we ran the initial migration command. You can find it by locating the directory that contains .MTL8 in the name.\" class=\"wp-image-53338\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-14.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-14-300x50.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><\/figure>\n\n\n\n<p><code>$ sudo rm -Rf \/home\/winnie.MTL8xtIX<\/code><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Conclusion<\/strong><\/h2>\n\n\n\n<p>We have demonstrated the process of home directory and swap space encryption as provided by the <code>ecrypt-utils<\/code> and <code>cryptsetup<\/code> packages. While this offers a decent degree of protection for your personal files and documents, it\u2019s no match for full disk encryption which encrypts all the partitions including system partitions during installation. If encryption is your only line of defense, consider implementing another security layer such as <a href=\"https:\/\/jumpcloud.com\/blog\/linux-releases-desktop-mfa-security-commands\">multi-factor authentication on Ubuntu<\/a>.<\/p>\n\n\n\n<p>Through the <a href=\"https:\/\/jumpcloud.com\/platform\/cloud-directory\">JumpCloud Directory Platform<\/a>, you can easily implement disk encryption throughout your entire fleet. Through its remote device management capabilities, both Windows and macOS devices can achieve full disk encryption through standard, out-of-the-box policies, while Linux devices can be managed and monitored for encryption status and, using the Commands feature, deploy processes like the one featured in this tutorial to remote devices anywhere.<\/p>\n\n\n\n<p>To see how this works, along with a number of other device security and management features, <a href=\"https:\/\/console.jumpcloud.com\/signup\">sign up for a free trial today<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.<\/p>\n","protected":false},"author":150,"featured_media":53330,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[2414,2377,2388,2390],"collection":[2778],"platform":[],"funnel_stage":[3017],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Encrypt Ubuntu 20.04 Desktop Post Installation - JumpCloud<\/title>\n<meta name=\"description\" content=\"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Encrypt Ubuntu 20.04 Desktop Post Installation\" \/>\n<meta property=\"og:description\" content=\"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-03T14:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-14T21:03:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"297\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"How to Encrypt Ubuntu 20.04 Desktop Post Installation\",\"datePublished\":\"2021-09-03T14:00:00+00:00\",\"dateModified\":\"2024-08-14T21:03:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\"},\"wordCount\":1270,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\",\"keywords\":[\"encryption\",\"Linux\",\"tutorial\",\"ubuntu 20.04\"],\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\",\"url\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\",\"name\":\"How to Encrypt Ubuntu 20.04 Desktop Post Installation - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\",\"datePublished\":\"2021-09-03T14:00:00+00:00\",\"dateModified\":\"2024-08-14T21:03:32+00:00\",\"description\":\"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png\",\"width\":512,\"height\":297},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Encrypt Ubuntu 20.04 Desktop Post Installation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Encrypt Ubuntu 20.04 Desktop Post Installation - JumpCloud","description":"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation","og_locale":"en_US","og_type":"article","og_title":"How to Encrypt Ubuntu 20.04 Desktop Post Installation","og_description":"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.","og_url":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation","og_site_name":"JumpCloud","article_published_time":"2021-09-03T14:00:00+00:00","article_modified_time":"2024-08-14T21:03:32+00:00","og_image":[{"width":512,"height":297,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png","type":"image\/png"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"How to Encrypt Ubuntu 20.04 Desktop Post Installation","datePublished":"2021-09-03T14:00:00+00:00","dateModified":"2024-08-14T21:03:32+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation"},"wordCount":1270,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png","keywords":["encryption","Linux","tutorial","ubuntu 20.04"],"articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation","url":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation","name":"How to Encrypt Ubuntu 20.04 Desktop Post Installation - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png","datePublished":"2021-09-03T14:00:00+00:00","dateModified":"2024-08-14T21:03:32+00:00","description":"This tutorial will walk you through the steps to (remotely) encrypt a directory and the swap space on an existing Ubuntu 20.04 desktop installation.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/09\/how-to-encrypt-ubuntu-2004-post-install-6.png","width":512,"height":297},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/how-to-encrypt-ubuntu-20-04-desktop-post-installation#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"How to Encrypt Ubuntu 20.04 Desktop Post Installation"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/53324"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=53324"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/53324\/revisions"}],"predecessor-version":[{"id":113926,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/53324\/revisions\/113926"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/53330"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=53324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=53324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=53324"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=53324"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=53324"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=53324"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=53324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}